Glossary: Web App Security and Authentication

Path traversal

A file name like ../../.env that climbs out of the folder you meant. Resolve the full path and refuse it unless it still starts with your folder.